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Top Stories 

• An oil rig fire, potentially due to a gas leak, in Roosevelt prompted an evacuation of the 
area, including nearby homes, January 22. Residents were transferred to a local motel. - 
Salt Lake Tribune (See item 1) 

• Sagging overhead power lines led to a delay for Amtrak and commuter trains traveling 
between Washington, D.C., and Baltimore January 25. - Associated Press (See item 9) 

• The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) warned 
that a proof-of-concept exploit code was released that can brute force passwords to 
programmable logic controllers (PLC) before the vulnerability could be addressed by the 
manufacturer, Siemens. - Help Net Security (See item 31 ) 

• Numerous fires broke out across Massachusetts January 24 that left one victim dead, 
injured over three individuals, displaced dozens of residents, and caused several thousands 
of dollars in damages. - Boston Globe (See item 35 ) 
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Energy Sector 



1 . January 25, Salt Lake Tribune - (Utah) Oil rig fire forces evacuation near 
Roosevelt. An oil rig fire, potentially due to a gas leak, in Roosevelt prompted an 
evacuation of the area, including nearby homes, January 22. Residents were transferred 
to a local motel. 

Source: http://www.fireengineering.com/news/2013/01/25/oil-rig-fire-forces- 
evacuation-near-roosevelt.html 



For another story, see item 31 
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Chemical Industry Sector 

2. January 25, KTVN 2 Reno - (Nevada) Industrial chemical fire. A sodium fire broke 
out at an industrial building in Lyon County. Nearby residents were evacuated until 
authorities extinguished the blaze. 

Source: http://www.ktvn.com/storv/20704756/industrial-chemical-fire 

3. January 24, Northwest Florida Daily News - (Florida) Chemical leak reported at 
Pace plant. Taminco Pace No. 4 plant reported a DMA60 chemical leak after a spill 
during a rail transfer. Multiple people were affected at the scene, and a shelter was put 
in place as a precautionary measure. 

Source: http://www.nwfdailynews.com/local/update-chemical-leak-reported-at-pace- 
plant-1 .83572 

For another story, see item 31 
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Nuclear Reactors, Materials, and Waste Sector 

See item 31 
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Critical Manufacturing Sector 

See item 31 
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Defense Industrial Base Sector 



Nothing to report 
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Banking and Finance Sector 

4. January 24, The Register - (International) Brit mastermind of Anonymous PayPal 
attack gets 18 months’ porridge. Three members of the hacktivist group Anonymous 
were sentenced in the U.K. for their role in the “Operation Payback” distributed denial 
of service (DDoS) campaign against Visa, Mastercard, and PayPal in 2010. 

Source: 

http://www.theregister.co.uk/2013/01/24/uk anonymous hackers sentencing payback/ 

5. January 24, ABC News - (International) Capital One website disrupted, cyber 
protestors claim attack. Capital One acknowledged that its Web site was inaccessible 
to customers for a time January 24, and a hacktivist group that has previously attacked 
financial institution Web sites claimed credit for the disruption. 

Source: http://abcnews.go.com/blogs/headlines/2Q13/01/capital-one-website-disrupted- 
cyber-protestors-claim-attack/ 

6. January 24, Philidelphia Inquirer - (Pennsylvania) Montco man charged in 
“massive” mortgage fraud. A Montgomery County accountant was indicted along 
with over 1 1 others in a mortgage fraud scheme that involved more than $20 million in 
loans for residential properties. 

Source: http://articles.philly.com/2013-01-24/news/36529274 1 mortgage-fraud- 
straw-buyers-montco-man 

7. January 24, Ashbury Park Press - (New Jersey) 2 Shore residents charged in $10 
million mortgage fraud scheme. Nine New Jersey residents were charged in an 
alleged $10 million mortgage fraud scheme that used fraudulent transactions and 
documents to obtain loans for at least 15 properties. 

Source: http://www.app .co m/article/20 1301 24/NJBIZ/30 1 240043/2-Shore-residents- 
charged-in-10-million-mortgage-fraud-scheme 
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Transportation Sector 

8. January 25, KAJ 18 Kalispell - (Montana) At least 1 hurt in Highway 83 wreck near 
Swan Lake. Highway 83 near Swan Lake was shut down for hours January 23 after a 
multiple car pileup. 

Source: http://www.kail8.com/news/at-least-one-person-iniured-in-highway-83-wreck/ 

9. January 25, Associated Press - (Washington, D.C.; Maryland) Sagging overhead 
power lines disable Md. commuter train, lead to major Amtrak delays. Sagging 
overhead power lines led to a delay for Amtrak and commuter trains traveling between 
Washington, D.C., and Baltimore January 25. 

Source: http://www.washingtonpost.com/local/amtrak-says-overhead-power-line- 
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problems-delay-dc-baltimore-service/2013/01/25/526b65ec-66fa-l le2-889b- 
f23c246aa446 story.html 



10. January 24, Associated Press - (Utah) Freezing rain ices Salt Lake City roads, 

runways. Salt Lake City International Airport reopened January 24 after shutting down 
for three hours. All three of the airport’s runways were also back in service after 
inclement weather caused them to close for several hours. 

Source: http://www.necn.com/01/24/13/Salt-Lake-City-airport-closed-due-to- 
icy/landing nation. html?&apID=04e5 Ia4248d24fdcacce63216f23e26f 
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Postal and Shipping Sector 

11. January 25, WBNS 10 Columbus - (Ohio) Men accused of stealing mail still on the 
loose. Two men caught with over 20 pieces of from 6 different households in 
Columbus did not show for their court appearances and have been seen running from 
house to house rummaging through mailboxes. 

Source: http://www.10tv.com/content/stories/2013/01/25/columbus-mail-thefts- 
suspects-on-loose.html 
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Agriculture and Food Sector 

12. January 25, Food Safety News - (Michigan; Arizona) Salmonella Typhimurium 
outbreak leads to ground beef recall. Jouni Meats Inc. recalled about 500 pounds of 
ground beef products from Arizona and Michigan due to Salmonella Typhimurium 
contamination. 

Source: http://www.foodsafetynews.com/2013/01/two-state-salmonella-typhimurium- 
outbreak -leads-to-beef-recall/#.UQJzOR2Cm58 

13. January 24, Food Safety News - (National) Hunt’s Tomato Sauce recalled for can 
defect. ConAgra Foods, Inc. voluntarily recalled lots of 8-ounce Hunt’s Tomato Sauce 
and Hunt’s Tomato Sauce No Salt Added due to a defective inner lining of the can. 
Source: http://www.foodsafetynews.com/2013/01/hunts-tomato-sauce-recalled-for-can- 
defect/#.UQGeDB2Cm58 

14. January 24, Food Safety News - (Texas; Louisiana) Salmonella Uganda outbreak 
sparks Hog Head cheese recall. Stallings Head Cheese Co., Inc. recalled 4,700 
pounds of hog head cheese from Texas and Louisiana because of possible Salmonella 
Uganda contamination. 

Source: http://www.foodsafetynews.com/2013/01/salmonella-uganda-outbreak-sparks- 
ho g-headcheese-recall/#. UQ J zfx2Cm5 8 

15. January 22, U.S. Food and Drug Administration - (National) Annie’s voluntarily 

recalls Annie’s Homegrown frozen pizza products. Annie’s, Inc. recalled all 



- 4 - 



varieties of “Annie’s Homegrown Rising Crust” pizzas because it may contain 
fragments of metal. 

Source: http://www.fda.gov/Safety/Recalls/ucm336376.htm 
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Water Sector 



16. January 25, Williamsport Sun-Gazette - (Pennsylvania) Blossburg-area residents 
warned about tapwater. Authorities in Williamsport cautioned residents using tap 
water after elevated levels of mercury were discovered January 24. Residents were told 
to use bottled water until an additional supply could be acquired from the Sportsmen’s 
Club Well. 

Source: http://www.sungazette.com/page/content.detail/id/588417/Blossburg-area- 
residents-warned-about-tapwater.html?nav=501 1 

17. January 24, Milwaukee Journal Sentinel - (Wisconsin) DNR investigating well 
contamination in southeastern Wisconsin. Officials with the Wisconsin Department 
of Natural Resources launched an investigation into an estimated 1 1,000 private wells 
due to elevated levels of molybenum. The Raymond School District was told its water 
supply was affected and has since offered an alternative source of drinking water. 
Source: http://www.jsonline.com/news/wisconsin/dnr-investigating-well- 
contamination-in-southeastern-wisconsin-6r8guao-188296531.html 

For more stories, see items 24 and 31 
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Public Health and Healthcare Sector 

18. January 25, Associated Press - (Massachusetts) Mass, man gets probation for 

Medicare fraud; falsified and forged patient records. A Boston man was arrested 
and sentenced for forging false patient records to submit to Medicare while working for 
a medical device producer. 

Source: 

http://www.therepublic.com/view/story/194a59adbdl74bedafc774c867826bla/MA— 

Medicare-Fraud 

19. January 24, Torrance Daily Breeze - (National) ‘Superbug’ infections threat calls 
for massive changes in health care procedures, LA BioMed researcher 

says. Infectious disease experts and researchers are recommending an overhaul in U.S. 
treatment methods to mitigate the risk of deadly bacterial infections. 

Source: 

http://www.nhregister.com/articles/2013/01/24/news/doc5101c4ccl8db731 1970783.txt 
?viewmode=fullstory 
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20. January 24, WBBH 2 Fort Myers - (Florida) DEA agents investigating more 
Sunshine Pharmacy locations. Federal agents are investigating Sunshine Pharmacy 
locations in Naples on suspicion of Medicare fraud. 

Source: http://www.marconews.com/news/2013/ian/24/dea-agents-investigating-rnore- 
sunshine -pharmacy-1 o/ 

21 . January 24, WCMH 4 Columbus - (Ohio) 2 injured in fire at Fayette Co. nursing 
home. A room fire at a nursing home in Washington Court hospitalized two people and 
lead to the evacuation of the building. 

Source: http://www2.nbc4i.com/news/201 3/ian/24/4/fire-reported-fayette-co-nursing- 
home-ar- 1326452/ 
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Government Facilities Sector 

22. January 24, KSTU 13 Salt Lake City - (Utah) Two Altamont schools closed due to 
natural gas leak. Two Altamont schools were closed January 24 after a natural gas 
leak. 

Source: http://foxl3now.com/2013/01/24/two-altamont-schools-closed-due-to-natural- 
gas-leak/ 

23. January 24, Clark County Columbian - (Washington) Student, 14, arrested in 
Skyview chemical incident. A chemical mixture was spilled at a Vancouver high 
school January 24 that caused the partial evacuation of the building. One suspect was 
arrested, and nine others were transported to a local hospital for observation. 

Source: http://www.columbian.com/news/2013/ian/24/student-taken-hospital-after- 
chemical-spill-skyvie/ 

24. January 24, Lancaster Intelligencer Journal - (Pennsylvania) Water main break 
closes Stevens College. A water main break at Thaddeus Stevens College of 
Technology January 24 forced classes to be canceled January 25. 

Source: http://lancasteronline.com/article/local/807240 Water-main-break-closes- 
Stevens-College.html 

25. January 24, WMTV 15 Madison - (Wisconsin) Madison city clerk’s office responds 
to security breach. Madison authorities notified 50 individuals that their dates of birth 
and Social Security numbers were openly accessible online through the Madison 
Legislative Information Center. 

Source: http://www.nbcl5.com/news/headlines/Citv-Clerks-Office-Responds-to- 
Security-Breach-1 8826639 1 .html 



For another story, see item 17 
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Emergency Services Sector 



26. January 25, Associated Press; Daily Hampshire Gazette - (Massachusetts) DA 
requests audit of western Mass, drug lab. An Amherst crime lab is under a full audit 
after it was discovered that a chemist stole and tainted evidence. 

Source: http://www.wpri.com/dpp/news/massachusetts/ap massachusetts/DA-requests- 
audit-of-western-Mass-drug-lab 48176600 

27. January 25, South Coast Today - (Massachusetts) Two men pretending to be police 
abduct New Bedford man. A man was kidnapped by two individuals that claimed 
they were police officers after entering his Boston apartment wearing police-affiliated 
attire and flashing what appeared to be police badges. 

Source: 

http://www.southcoasttodav.com/apps/pbcs.dll/article?AID=/20130125/NEWS/301250 

342 



28. January 24, Walnut Creek Patch - (California) Retired fire captain faces theft 
charges. A former Contra Costa fire captain was charged after authorities discovered 
he stole equipment from the fire district. 

Source: http://walnutcreek.patch.com/articles/retired-frre-captain-faces-theft-charges 
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Information Technology Sector 

29. January 25, Softpedia - (International) GitHub forced to disable search after 
exposing private SSH keys. GitHub disabled its new search function after it returned 
results that included private Secure Shell (SSH) keys used by several Web sites. 
Source: http://news.softpedia.com/news/GitHub-Forced-to-Disable-Search-After- 
Exposing-Private-SSH-Keys-324200.shtml 

30. January 25, Help Net Security - (International) Cutwail botnet on spam rampage, 
delivers Cridex worm. The Cutwail/Pandex botnet has been rented by attackers 
seeking to infect users with the W32 Cridex worm, according to Symantec researchers. 
Source: http://www.net-security.org/malware news.php?id=2386 

31. January 25, Help Net Security - (International) SCADA password cracking code 
available. The Industrial Control Systems Cyber Emergency Response Team (ICS- 
CERT) warned that a proof-of-concept exploit code was released that can brute force 
passwords to programmable logic controllers (PLC) before the vulnerability could be 
addressed by the manufacturer, Siemens. 

Source: http://www.net-security.org/secworld.php?id=14303 

32. January 25, The H - (International) Chrome update closes holes and fixes mouse 
wheel issues. Google released Chrome 24.0.1312.56, which addresses five security 
vulnerabilities, three of which were rated as high severity. 
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Source: http://www.h-online.com/security/news/item/Chrome-update-closes-holes-and- 
fixes-mou se-wheel-issues- 1 791381 .html 



33. January 24, IDG News Service - (International) Web server hackers install rogue 
Apache modules and SSH backdoors, researchers say. Researchers from Securi 
reported that a group of attackers using rogue Apache modules has been replacing 
Secure Shell (SSH) binary files in compromised servers with backdoored versions that 
collect user information and passwords from incoming and outgoing SSH connections. 
Source: http://www.networkworld.com/news/2013/012413-web-server-hackers-install- 
rogue-266121.html 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



34. January 24, Hawaii News Now - (Hawaii) Hawaiian Telcom completes repairs after 
fiber optic cable intentionally cut. For the second time in about two weeks, a fiber 
optic cable was severed January 23 underneath a Hawaiian airport. Hawaiian Telecom 
restored service after several hours and authorities have a suspect in custody. 

Source: http://www.hawaiinewsnow.com/story/20668178/services-affected-after-fiber- 
optic-cable-intentionally-cut 
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Commercial Facilities Sector 

35. January 25, Boston Globe - (Massachusetts) String of fires hits 7 communities 
across Mass. Numerous fires broke out across Massachusetts January 24 that left one 
victim dead, injured over three individuals, displaced dozens of residents, and caused 
several thousands of dollars in damages. 

Source: http://bostonglobe.com/metro/2013/01/25/string-fires-mass-leave-one-dead- 
many-displaced/QgL2hdFtuVkk6YAsghgN7L/story.html 

36. January 25, Associated Press - (Pennsylvania) 1 dead in shopping center fire near 
Philadelphia. A fire at a shopping center in Cheltenham January 24 caused the death of 
one victim. Before firefighters got the fire under control, it damaged six stores while 
others suffered smoke and water damage. 

Source: 

http://www.pennlive.eom/midstate/index.ssf/2013/01/l dead in shopping center fire. 
html 



37. January 24, WISH 8 Indianapolis - (Indiana) Dozens of residents displaced by 
fire. The Red Cross was present to assist some 80 residents after an Indianapolis 
apartment fire January 24. A pair of firefighters received minor injuries responding to 
the fire. 

Source: http://www.wishtv.com/dpp/news/local/marion county/apartment-complex - 
burns-on-ne-side 

38. January 24, Enterprise Southeast Sun - (Alabama) Daleville police find active meth 
lab. Police uncovered a large meth lab in a Daleville apartment January 19. Authorities 
described a continuous shake and bake operation occurring in three rooms of the 
apartment. 

Source: http://www.southeastsun.com/newscrime/article 061765f0-6647-l Ie2-a695- 
001a4bcf6878.html 

39. January 24, KTVI 2 St. Louis - (Missouri) Fire causes $1M in damages to Rolla 
AutoZone. About $1 million in damages to an AutoZone in Rolla was done by a 2- 
alarm fire that was ruled suspicious by local authorities January 24. 

Source: http://fox2now.com/2013/01/24/fire-causes-lm-in-damages-to-rolla-autozone/ 

40. January 24, Chicago Tribune - (Illinois) Woodridge condos evacuated after 
potassium cyanide found. A small amount of the toxic chemical potassium cyanide 
was found in a condo unit, causing the evacuation of a Woodridge condo complex 
January 24. 

Source: 

http://www.chicagotribune.com/news/local/suburbs/downers grove darien westmont 

woodridge/chi-woodridge-condos-evacuated-after-potassium-cyanide-found- 

201 301 24,0, 7226447.story 

41. January 24, Associated Press - (New York) Long Island hotel evacuated after 
apparent suicide. Around 100 individuals were evacuated from a Long Island hotel 
January 24 after a guest used a chemical mixture to commit suicide. The individuals 
were allowed to return 7 hours later. 

Source: http://www.app.com/viewart/20130124/NJNEWS18/30124Q123/Long-Island- 
hotel-evacuated-after-apparent-suicide 
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National Monuments and Icons Sector 



Nothing to report 
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Dams Sector 



42. January 24, New Haven Register - (Connecticut) East Haven sea wall project to start 
in spring. State officials and representatives of a private condominium in New Haven 
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authorized the repairs of a seawall damaged by Hurricane Irene. 

Source: 

http://nhregister.com/articles/2013/01/24/news/metro/doc5101f74d85fb0086516236.txt 

?viewmode=fullstory 
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NTAS 



NO ACTIVE ALERTS 

www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs. gov/IPDail yReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703)387-2341 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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